1H 2023 Ransomware Landscape Overview

**Executive Summary:** Arctic Wolf's H1 2023 ransomware landscape report documents a substantial uptick in ransomware activity and dark-web leak site postings—over 2,200 victim posts with ~46% US-based—with LockBit and Cl0p among the most active actors, median ransom demands rising to ~$600,000, SMBs comprising 82% of victims, and observable exploitation of vulnerabilities (e.g., MOVEit) driving significant incidents across multiple industries and countries.